CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a segment issue when downgrading gsosize
Linearize the skb when downgrading gsosize because it may trigger a BUGON() later when the skb is segmented as described in [1,2].
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
Linearize the skb when downgrading gso_size to prevent a later BUG_ON() during skb segmentation.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42281?
The severity of CVE-2024-42281 has not been explicitly rated, but it addresses a bug that could lead to segmentation issues in the Linux kernel.
How do I fix CVE-2024-42281?
To fix CVE-2024-42281, update to Linux kernel versions 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1 for Debian systems.
Which Linux kernel versions are affected by CVE-2024-42281?
Linux kernel versions up to and including 5.10.223-1 and the specific 6.1 version without the mentioned patch are affected by CVE-2024-42281.
What was the cause of CVE-2024-42281?
CVE-2024-42281 was caused by a segment issue when downgrading gso_size, which could lead to further segmentation problems in the kernel.
Is CVE-2024-42281 specific to any Linux distribution?
CVE-2024-42281 specifically affects Debian Linux distributions, and remedial updates are available for its kernel packages.